Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraMedium
A global corporation needs to manage access to sensitive resources based on user roles, location, and device compliance. They want to ensure that only compliant devices from specific locations can access certain applications. Which Microsoft Entra capability is best suited for implementing these granular access controls?
- AMicrosoft Entra Conditional Access
- BMicrosoft Entra B2B Collaboration
- CMicrosoft Entra Identity Governance
- DMicrosoft Entra Application Proxy
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft Entra Conditional Access
Microsoft Entra Conditional Access allows organizations to enforce policies that evaluate various signals like user, location, device, and application to make real-time access decisions, requiring specific actions like MFA or blocking access.
Why the other options are wrong
- B. B2B Collaboration manages external user access, but doesn't provide granular conditional access policies.
- C. Identity Governance focuses on managing and reviewing access lifecycles, not real-time access decisions based on conditions.
- D. Application Proxy allows secure remote access to on-premises apps, not for defining access policies based on conditions.
Microsoft Entra Conditional Access
A Microsoft Entra ID feature that brings signals together, to make decisions, and enforce organizational policies. It is at the heart of the new identity-driven control plane.
- Evaluates conditions like user group, location, device state, sign-in risk.
- Enforces access controls like MFA, blocking access, or requiring compliant devices.
- Helps protect corporate resources and data.
Memory trick: Entra's Conditional Access: only the right key, in the right hand, at the right door.